On the concrete hardness of Learning with Errors
Royal Holloway University of London
Abstract
Abstract The learning with errors (LWE) problem has become a central building block of modern cryptographic constructions. This work collects and presents hardness results for concrete instances of LWE. In particular, we discuss algorithms proposed in the literature and give the expected resources required to run them. We consider both generic instances of LWE as well as small secret variants. Since for several methods of solving LWE we require a lattice reduction step, we also review lattice reduction algorithms and use a refined model for estimating their running times. We also give concrete estimates for various families of LWE instances, provide a Sage module for computing these estimates and highlight…
Citation impact
- FWCI
- 56.54
- Percentile
- 100%
- References
- 0
Authors
3Topics & keywords
- Learning with errors
- Cryptography
- Computer science
- Reduction (mathematics)
- Theoretical computer science
- Lattice (music)
- Block (permutation group theory)
- Lattice reduction
- Sustainable cities and communities